added more restrictions. must be logged in to view users.